Cybersecurity Detection Expert

About the role

Holcim is looking for a Cybersecurity Detection Expert to strengthen its digitized supply‑chain security. You will design, develop and maintain detection rules across multiple platforms, helping the organization identify and respond to threats in real time.

Key responsibilities

• Develop and tune detection logic on Google SecOps SIEM/SOAR and SentinelOne EDR/XDR platforms.
• Analyze endpoint, network, cloud and identity telemetry to uncover malicious activity.
• Apply MITRE ATT&CK framework to map adversary techniques and improve coverage.
• Collaborate with SOC analysts to handle incidents and refine response processes.
• Contribute to a culture of inclusion, diversity and ethical behavior within the team.

Required profile

• University degree in Computer Science, Engineering or a related field.
• At least one recognized cybersecurity certification (e.g., ISACA, ISC2, SANS).
• 5+ years of experience in detection engineering, security operations or threat detection.
• Strong understanding of attacker techniques and adversary behavior.

Required skills

• Google SecOps SIEM/SOAR platform
• SentinelOne EDR/XDR platform
• MITRE ATT&CK framework
• AWS and GCP security monitoring tools
• Incident handling methodologies
• Scripting/automation with Python, PowerShell or Bash